Originally reported by Foresight News on November 11, 2026, at 09:27 (UTC+8). LNbits, an open-source Bitcoin Lightning wallet and payment platform, released security update 1.7.0 and urged users to update immediately. LNbits said the vulnerability affects all earlier versions.
LNbits warned that upgrading alone cannot protect users whose credentials have already been exposed. It advised users to reset wallet keys and change related credentials, and to migrate servers if they suspect a compromise.
LNbits founder Ben Arc said the team was working to respond after users and the team suffered losses. Separately, one user reported that attackers created new accounts through their LNbits instance and stole approximately 0.023 BTC. That account is a user report, not a confirmed total for the incident.